• Tweet ^[1]
• Email ^[2]

• Tweet ^[1]
• Email ^[2]

Finjan ^[3], an internet security firm, has discovered a new Trojan horse virus that steals money from your account. Your typical phishing or virus will steal your login credentials and send it to a thief, who either sells it or empties your account. This new virus, called URLZone, will steal your credentials but also steal money from your account, all the while displaying a fake balance when you login. How much it steals depends on your much is available, it only steals enough not to trigger a bank’s fraud detection systems.

At the moment, URLZone can only infect Windows systems using Firefox, Internet Explorer 6, 7 & 8, or Opera web browsers. Computers are infected when you open an e-mail, click on a website distributing malware, or visit an infected website using one of those browsers. When you visit a targeted bank, and it’s thus far been limited to German banks, the trojan transfers money without you even knowing.

This is the first Trojan Finjan has come across that hijacks a victim’s browser session, steals the money while the victim is doing online banking, and then covers its tracks by modifying information displayed to the victim, all in real time, Ben-Itzhak [chief technology officer at Finjan] said.

This is scary.

Banking Trojan steals money from under your nose ^[4] [CNet News]

(Photo: hendricksphotos ^[5])